https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T18:30:58.640378+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-03100 bdu:2021-03100 2026-10-03T18:30:58.954849+00:00 bdu:2021-03100 https://cve.radiocsirt.org/vuln/certfr-2021-avi-562 certfr-2021-avi-562 — De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaqu… 2026-10-03T18:30:58.954898+00:00 certfr-2021-avi-562 https://cve.radiocsirt.org/vuln/cnvd-2021-37655 cnvd-2021-37655 2026-10-03T18:30:58.954926+00:00 cnvd-2021-37655 https://cve.radiocsirt.org/vuln/euvd-2026-48121 EUVD-2026-48121 2026-10-03T18:30:58.954954+00:00 EUVD-2026-48121 https://cve.radiocsirt.org/vuln/fkie_cve-2020-36328 fkie_cve-2020-36328 2026-10-03T18:30:58.954978+00:00

A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

 https://cve.radiocsirt.org/vuln/ghsa-jxwm-333p-5cwx GHSA-jxwm-333p-5cwx 2026-10-03T18:30:58.955024+00:00

A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

 https://cve.radiocsirt.org/vuln/gsd-2020-36328 gsd-2020-36328 2026-10-03T18:30:58.955052+00:00 gsd-2020-36328 https://cve.radiocsirt.org/vuln/msrc_cve-2020-36328 msrc_CVE-2020-36328 — A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is pos… 2026-10-03T18:30:58.955070+00:00 msrc_CVE-2020-36328 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1860-1 openSUSE-SU-2021:1860-1 — Security update for libwebp 2026-10-03T18:30:58.955100+00:00

Security update for libwebp

 https://cve.radiocsirt.org/vuln/rhba-2021:2854 RHBA-2021:2854 — Red Hat Bug Fix Advisory: Migration Toolkit for Containers (MTC) 1.4.6 release advisory 2026-10-03T18:30:58.955133+00:00

libwebp: heap-based buffer overflow in PutLE16() nss: TLS 1.3 CCS flood remote DoS Attack openldap: NULL pointer dereference for unauthenticated packet in slapd kernel: security bypass in certs/blacklist.c and certs/system_keyring.c jetty: local temporary directory hijacking vulnerability jetty: buffer not correctly recycled in Gzip Request inflation jetty: request containing multiple Accept headers with a large number of "quality" parameters may lead to DoS libwebp: heap-based buffer overflow in WebPDecode*Into functions libwebp: use-after-free in EmitFancyRGB() in dec/io_dec.c libxml2: Use-after-free in xmlEncodeEntitiesInternal() in entities.c libxml2: Heap-based buffer overflow in xmlEncodeEntitiesInternal() in entities.c libxml2: Use-after-free in xmlXIncludeDoProcess() in xinclude.c lz4: memory corruption due to an integer overflow bug caused by memmove argument libxml2: NULL pointer dereference when post-validating mixed content parsed in recovery mode libxml2: Exponential entity expansion attack bypasses all existing protection mechanisms rpm: Signature checks bypass via corrupted rpm package jenkins-2-plugins/config-file-provider: Does not configure its XML parser to prevent XML external entity (XXE) attacks. jenkins-2-plugins/config-file-provider: Does not correctly perform permission checks in several HTTP endpoints. jenkins-2-plugins/config-file-provider: does not require POST requests for an HTTP endpoint, resulting in a cross-site request forgery (CSRF) vulnera…

 https://cve.radiocsirt.org/vuln/suse-su-2021:1860-1 SUSE-SU-2021:1860-1 — Security update for libwebp 2026-10-03T18:30:58.955261+00:00

Security update for libwebp

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-36328 UBUNTU-CVE-2020-36328 2026-10-03T18:30:58.955343+00:00

Affected: Ubuntu:Pro:14.04:LTS: libwebp, Ubuntu:Pro:16.04:LTS: libwebp, Ubuntu:18.04:LTS: libwebp, Ubuntu:20.04:LTS: libwebp

A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.